If you are unable to create a new account, please email support@bspsoftware.com

 

News:

MetaManager - Administrative Tools for IBM Cognos
Pricing starting at $2,100
Download Now    Learn More

Main Menu

Public Folders / Portal Pages

Started by craigalaniz, 05 Aug 2014 08:06:05 AM

Previous topic - Next topic

craigalaniz

Hello

We are in the process of upgrading from Cognos 8.4 to 10.2. We are using portal tabs to filter reports for certain groups of users. My question is, do all users have to have permissions to Public Folders in order to access the folders that the portal tab points to? It appears to me that this is true. If it is,  how do we keep users from accessing "everything". I was thinking of taking away the ability to even see the Public Folder. Is this a good solution?

Thanks

Craig




bdbits

Normally, yes Public Folders is viewable by everyone. What we do (and I think this is typical) is set folder permissions on the root public folders. If a user does not have permissions to the folder, they will not ever see it no matter what the interface.

Using portal tabs to restrict views is security by obscurity, which is essentially no security at all.  :D

craigalaniz

Hello

Thanks for your reply. I attempted to restrict permissions to Public Folders so users could not see it at all. They then also could not see the portal tabs.

What is a better way to set up security?

Thanks

Craig

AussiePete2011

Hi there

Think of it this way
You are driving along a road with different side streets with different houses that you may or may not be able to access.
To be able to drive down the main road you need traverse rights.
TO be able to access a particular side street you need traverse rights.  If you want to access a house on this side street then you need the combination of Traverse and read.

So you need traverse on Public Folders to be able to navigate down the folders from Public folders
Any folders that you have traverse rights on you can see and then navigate.
If you want to be able to see what's on the path you also need read.

Let me know if that makes sense.
Cheers
AussiePete